Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa
File:                     0751b212-4aef-33a9-8356-2edbfd06df0d.roa (raw, json)
Hash identifier:          flwOR20KHpu+HBNDS+TB7J7++6+oLMuVClIzXISa/Yo=
Subject key identifier:   CC:F8:74:7D:31:69:D7:8C:EB:E1:77:D9:5F:9C:99:8E:B8:7B:96:3C
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B5B07437DDD83E50BDF5B88A0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     394437
IP address blocks:        74.124.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:43:7d:dd:83:e5:0b:df:5b:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=43225023-9db8-4bfb-b2d9-f3117072c416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:2e:70:8b:5c:65:1e:f1:e2:32:d8:6c:06:
                    d1:0f:3d:7d:a9:5f:73:e6:6c:22:c9:31:67:f7:2a:
                    72:d0:3b:47:0a:a8:87:f7:42:24:33:04:38:e8:b5:
                    30:1b:1d:f1:f5:19:32:46:78:c2:1a:d9:47:43:26:
                    19:0a:43:7b:e0:ba:a2:3f:b2:09:45:56:8d:84:e2:
                    96:f8:9a:95:a0:44:03:f3:82:57:47:65:0f:9f:7e:
                    fc:a7:00:41:e3:fc:43:39:91:b0:e5:33:a9:40:af:
                    1f:36:4f:3c:8d:73:e9:df:ff:a7:e5:fc:82:12:fa:
                    d4:47:8d:f7:47:b8:5c:9a:5d:6a:6a:be:d5:96:84:
                    dc:5a:4f:33:c9:0a:f8:3f:df:88:26:de:d6:80:10:
                    bb:ca:16:24:8e:92:f2:9d:a1:0e:ea:f5:65:14:38:
                    59:b6:d4:db:00:a9:a1:a4:92:27:2b:6e:23:8f:03:
                    c3:26:4a:14:9a:6d:81:41:db:ee:01:d7:a4:3e:d4:
                    99:85:19:07:73:5c:a9:29:27:2a:73:82:49:3c:37:
                    cb:9c:77:6a:fa:c2:b1:71:93:01:8a:92:1e:dd:5e:
                    2d:14:34:98:05:2d:be:a5:94:85:c8:96:ff:dd:df:
                    d0:d8:8e:4a:5f:1d:a6:f9:1e:8b:c2:43:22:14:aa:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:74:7D:31:69:D7:8C:EB:E1:77:D9:5F:9C:99:8E:B8:7B:96:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:4e:d5:a6:f6:01:98:c1:ca:10:45:fa:3b:f6:90:89:93:
         94:06:8f:1e:c2:21:89:eb:20:2f:6a:5a:3d:4a:fc:28:73:66:
         a9:90:37:fd:1b:75:bf:da:b6:92:89:e0:4f:2d:51:f0:e5:ea:
         2a:5b:e5:06:0d:82:00:70:4a:e3:5b:f2:58:8a:51:46:6f:fc:
         6d:26:c8:b4:82:f5:f7:ed:fb:6a:a0:f2:a8:59:25:b8:76:a5:
         57:13:ae:64:16:e4:ce:6d:be:03:9b:0e:ed:82:4d:87:0e:8b:
         fe:e9:63:c5:2a:a1:d3:1c:3e:21:e1:d4:11:4e:f3:1a:dc:b7:
         ff:21:3f:67:02:f3:79:d4:c7:17:c8:cf:a9:f9:f3:a1:b8:44:
         fb:d2:84:85:75:fe:86:13:4d:04:6b:51:5e:34:f1:14:4c:a6:
         01:28:ca:a0:15:d4:bd:46:4d:e0:dc:4a:12:3b:2f:5a:6c:01:
         22:4d:f8:3a:26:95:a9:4c:03:62:0f:c7:88:1f:3a:66:1f:de:
         0d:f6:d3:18:0d:f2:55:fd:ac:ac:c8:2b:20:d3:9f:d8:68:55:
         df:18:fe:a8:f8:bd:2a:50:12:ef:ab:ed:9e:6a:0b:f8:2a:64:
         66:92:94:4a:47:b4:96:7b:8b:06:3e:54:8c:9a:05:ba:fd:39:
         13:c5:c4:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0N93YPlC99biKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NDMyMjUwMjMtOWRiOC00YmZiLWIyZDktZjMxMTcwNzJjNDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAAucItcZR7x4jLYbAbRDz19qV9z5mwiyTFn
9ypy0DtHCqiH90IkMwQ46LUwGx3x9RkyRnjCGtlHQyYZCkN74LqiP7IJRVaNhOKW
+JqVoEQD84JXR2UPn378pwBB4/xDOZGw5TOpQK8fNk88jXPp3/+n5fyCEvrUR433
R7hcml1qar7VloTcWk8zyQr4P9+IJt7WgBC7yhYkjpLynaEO6vVlFDhZttTbAKmh
pJInK24jjwPDJkoUmm2BQdvuAdekPtSZhRkHc1ypKScqc4JJPDfLnHdq+sKxcZMB
ipIe3V4tFDSYBS2+pZSFyJb/3d/Q2I5KXx2m+R6LwkMiFKqRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMz4dH0xadeM6+F32V+cmY64e5Y8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDc1MWIyMTItNGFlZi0z
M2E5LTgzNTYtMmVkYmZkMDZkZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnw7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlNTtWm9gGYwcoQRfo79pCJk5QGjx7CIYnrIC9qWj1K/ChzZqmQN/0b
db/atpKJ4E8tUfDl6ipb5QYNggBwSuNb8liKUUZv/G0myLSC9fft+2qg8qhZJbh2
pVcTrmQW5M5tvgObDu2CTYcOi/7pY8UqodMcPiHh1BFO8xrct/8hP2cC83nUxxfI
z6n586G4RPvShIV1/oYTTQRrUV408RRMpgEoyqAV1L1GTeDcShI7L1psASJN+Dom
lalMA2IPx4gfOmYf3g320xgN8lX9rKzIKyDTn9hoVd8Y/qj4vSpQEu+r7Z5qC/gq
ZGaSlEpHtJZ7iwY+VIyaBbr9ORPFxOg=
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:08 2025 by rpki-client